NEWFreshservice is now a Ploy integrationSee what shipped
1.0ACCESS REVIEWS

Access reviews that
complete themselves

Luna scopes each cycle, chases reviewers, and verifies every revocation. You set the policies and sign the certificate.

Q3 SOC 2 reviewCYCLE 3 OF 4RUNNING1,412 grants · 214 reviewers · closes Oct 14
TimelineDue in 11 days.Due Oct 14, 202611DAYS LEFT
Remediation84 revocations to remediate.78 complete78REVOKED
Open queriesNo open queries right now.You're all caught up
Go to queries
Investigate with LunaEnd CycleSend Reminders
Access ReviewsOutcomesActivityQueriesAwaiting approvalExtension requestsEscalations
✓ StatusAll ▾
RESOURCEDUECOMPLETIONSTATUSACC.REVOC.REVIEWERSATTESTATIONACTIONS
ZendeskAppOct 1055%100%In ProgressReady For ApprovalComplete345Dan Whitmore——✓ Ana Reyes—✓ Attest & ApproveDownload certificate
LinearAppOct 1040%100%In ProgressReady For ApprovalComplete619Maya Osei——✓ Ana Reyes—✓ Attest & ApproveDownload certificate
GitHubAppOct 1270%100%In ProgressReady For ApprovalComplete12812Nadia Khan——✓ Ana Reyes—✓ Attest & ApproveDownload certificate
SnowflakeAppOct 1230%100%In ProgressReady For ApprovalComplete523Ben Toma——✓ Ana Reyes—✓ Attest & ApproveDownload certificate
FigmaAppOct 1460%100%In ProgressReady For ApprovalComplete192Jon Adeyemi——✓ Ana Reyes—✓ Attest & ApproveDownload certificate
1.1CAMPAIGNS

Launch with no surprises

Set the scope, the reviewers and the cadence once, and the preview shows every resolved resource and every gap before the campaign starts. Everything past the scope is a setting rather than a rule: switch on the controls your programme needs and leave the rest.

Add filter(what to review)
+ ADD FILTERDepartmentchanged inlast 90 days×
and
+ ADD FILTERLast accessedbefore90 days ago×
and
+ ADD FILTERContract renewalwithinnext 60 days×
Every resource you have connected is in scope. Narrow it down.Resolving against your live directory as you type.Service accounts and machine identities included.Nothing left unassigned. Ready to launch.
RESOLVED ·412128348DEPROVISIONINGREVIEWER
2 resources need a reviewer and a deprovisioning strategyRESOLVE ALL (2)
OktaSTRATEGY APPLIEDR. CHEN
GitHubSTRATEGY APPLIEDT. LIGETI
JiraSTRATEGY APPLIEDB. TOMA
DatadogMANUAL REMOVALNO REVIEWER
NotionSTRATEGY APPLIEDP. RAMAN
AirtableMANUAL REMOVALJ. PIKE
SnowflakeSTRATEGY APPLIEDNO REVIEWER
GitLabNO STRATEGYSTRATEGY APPLIEDNO REVIEWERA. REYES
FigmaNO STRATEGYSTRATEGY APPLIEDNO REVIEWERM. OSEI

See exactly who you're reviewing before you launch

Filters resolve against your live directory as you type. The preview flags anything that would stall the campaign: a resource nobody has connected yet, or one with no owner assigned and no way to remove access.

MFA Verification ReviewTEMPLATE
Dormant Account ReviewTEMPLATE
SOC 2 Compliance ReviewTEMPLATE
QUARTERLYALL PRIVILEGED ACCESS

Start from a template that matches your audit

SOC 2, dormant accounts, recent movers, MFA verification. Pick the template for an audit you already run, or start from an empty campaign and build your own.

Q2-CYCLE → Q3-CYCLEQ3-CYCLE → Q4-CYCLE+14−9~23+11−6~17
+Ben Toma · Snowflake · READERJOINER
+Erin Vale · Okta · Sales OpsJOINER
−Jon Adeyemi · Figma · EDITORLEAVER
~Priya Raman · ADMIN → MEMBERMOVER
… 41 more changes
~Erin Vale · Sales Ops → Deal DeskMOVER
+Nadia Khan · Looker · VIEWERJOINER
−Ben Toma · Snowflake · READERLEAVER
~Tom Ligeti · ADMIN → WRITEMOVER
… 28 more changes

Review everything, or only what changed

A repeat campaign can show just the difference since the last one: new accounts, removed accounts, entitlement changes. Teams that want the full set every quarter keep the full set.

1
Manager approvesSTAGE 1
IF ENTITLEMENT ~ "ADMIN*"
THEN ESCALATE
2
App owner confirmsSTAGE 2 · +7 DAYS

Add a second pair of eyes, if you want one

Multi-step approval is optional. Turn it on and admin entitlements go to a stage-two reviewer with a deadline of their own, matched by resource, entitlement or pattern.

Tom LigetiGITHUB · ADMIN:ORG
Tom Ligeti
Ana Reyes✓
SELF-REVIEW BLOCKED·REROUTED TO CO-REVIEWER

Stop people signing off on themselves

Segregation of duties is a setting you can leave off. With it on, Ploy flags reviewers who appear in their own set and reroutes those rows to a co-reviewer.

1.2EMPLOYEE PORTAL

One portal for all access work

The portal is where access lives for everyone at the company: what someone holds today, what they have asked for, and the reviews waiting on them. Campaigns land there with everything else, so a reviewer has one place to go.

LUNA RECOMMENDS312 ACCOUNTS
312 accounts used this entitlement in the last 30 days and match their department baseline. Safe to approve as a group.
CONFIDENCE · HIGHReview eachCertify all 312
ACCOUNTSTATUS
Priya RamanLOOKERVIEWER
Ben TomaSNOWFLAKEREADER
Erin ValeOKTASALES OPS
Dan WhitmoreZENDESKAGENT
Ana ReyesDATADOGSRE
Jonas PikeNETSUITEFINANCE
Maya OseiSNOWFLAKEANALYST
Ravi ShahLOOKERVIEWER
Lena FischerOKTASUPPORT
LUNA RECOMMENDS41 ACCOUNTS
41 accounts have not been used in 90+ days and no peer holds the same role. Safe to revoke.
LAST USED · 90+ DAYSReview eachRevoke all 41
ACCOUNTSTATUS
svc-deployAWS IAMSERVICE
Jon AdeyemiFIGMAEDITOR
Nadia KhanDATADOGADMIN
svc-etlSNOWFLAKESERVICE
Priya RamanGITLABMAINTAINER
vendor-roAWS IAMREAD ONLY
Ben TomaFIGMAVIEWER
svc-backupAWS IAMSERVICE
Erin ValeNOTIONGUEST
LUNA RECOMMENDS17 ACCOUNTS
17 contractor accounts renew in the next 60 days. Each needs a sponsor to confirm continued access.
NEEDS A PERSONReview eachConfirm all 17
ACCOUNTSTATUS
Grace OkaforGITHUBADMIN:ORG
Tom LigetiJIRAADMIN
Maya OseiNOTIONMEMBER
Nadia KhanSLACKGUEST
Ravi ShahGITHUBWRITE
Lena FischerJIRAREPORTER
Dan WhitmoreFIGMAEDITOR
Jonas PikeLOOKERVIEWER
Ana ReyesOKTACONTRACTOR

Everything a reviewer owes, in one place

The portal opens on the reviews assigned to you, in the order they fall due. Open one and the accounts are already prepared, with Luna's recommendation sitting on every row.

Q3 SOC 2 reviewIN PROGRESSLEFT12d
Contractor renewalsNOT STARTEDLEFT3d
← PrevNext →

Nothing is missed and nothing runs late

Every campaign is tracked to completion with its progress and the days it has left, and a navigator walks the reviewer through what is outstanding: 3 left, then 2, then done. A review cannot quietly slip past its deadline.

HomeMy AccessAccess ReviewsTasksCatalog
Your reviews3 OPEN
Q3 SOC 2 review12d
Contractor renewals3d
Finance app owners21d

Reviewers work where they already are

Reviews happen in the portal, next to the access someone holds themselves. There is no console to set up and nothing for a reviewer to install.

1.3REVIEWS

Luna does the analysis, reviewers decide

Luna reads every row against HRIS context, how the application is actually used, and what the person's peers hold, then recommends approve, revoke or a closer look, with her reasoning attached. Nothing changes until a reviewer certifies it.

AUTO APPROVE · 312AUTO REVOKE · 41NEEDS MANUAL REVIEW · 47
LUNA RECOMMENDS312 ACCOUNTS
312 accounts used this entitlement in the last 30 days and match their department baseline. Safe to approve as a group.
CONFIDENCE · HIGHCertify all 312
LUNA RECOMMENDS41 ACCOUNTS
41 accounts have not been used in 90+ days and no peer holds the same role. Safe to revoke.
LAST USED · 90+ DAYSRevoke all 41
LUNA RECOMMENDS17 ACCOUNTS
17 contractor accounts renew in the next 60 days. Each needs a sponsor to confirm continued access.
NEEDS A PERSONConfirm all 17

Hundreds of rows, one decision

Luna's recommendation covers a whole group at a time: 312 accounts that match their department baseline and were used this month, 41 that nobody has touched in 90 days. A reviewer reads the reasoning and certifies the group, and only then does anything change.

GITHUB · ADMIN:ORG · ENGINEERING3 OF 12 HOLD ADMIN
Priya RamanBackend EngineerWRITE
Ben TomaFrontend EngineerWRITE
Nadia KhanStaff EngineerADMIN:ORG
Erin ValeSite ReliabilityMAINTAIN
Tom LigetiEng ManagerADMIN:ORG
Dan WhitmoreQA EngineerTRIAGE
Ana ReyesSite ReliabilityWRITE
Jonas PikeData EngineerREAD
Maya OseiSecurity EngineerWRITE
Lena FischerBackend EngineerWRITE
Jon AdeyemiDesign EngineerREAD
Ravi ShahPlatform LeadADMIN:ORG

Outliers stand out on the row

Every row carries how the person compares with their department: 3 of 12 peers also hold Admin. Access that almost nobody else has is what Luna puts in front of a human.

Upload evidenceDROP THE APP'S OWN EXPORTUPLOADING EVIDENCE.XLSXEVIDENCE.XLSX UPLOADED ✓Scanning…EVIDENCE.XLSX UPLOADED ✓Scanning complete
svc-backupSERVICEREMOVEDerin.valeVIEWERjon.adeyemiEDITORENTITLEMENT DIFFERENTvendor-roREAD ONLYREMOVEDpriya.ramanREADERdan.whitmoreAGENTADDEDmaya.oseiWRITEADDED

Reconcile the application's own export

Drop in a screenshot or a user export from the application itself. Luna reconciles it against Ploy and flags every account the evidence adds, removes or contradicts, each with a one-click fix.

Rosa CalderónCONTRACTOR · FIGMA · EDITORAWAITING RESPONSEANSWERED
REVIEWER"Is this contractor still with us?"
APP ADMIN · T. LIGETI"Left in June, remove."
SUBMISSION BLOCKED · 1 OPEN QUERYSUBMISSION UNBLOCKED ✓

Ask the admin without leaving the row

Reviewers raise a query on any account and the answer lands on the same row. Open queries block submission until the admin replies, so questions never leak into Slack.

Fix incorrect dataFIXING JON ADEYEMI'S RECORDED ACCESS · LINEAR
Fixes apply immediately to Ploy's record. This is not a review decision.
Tick the entitlements this account actually has at source.
Search or type to create…
OTHER
adminAdding
appRemoving
oauth appAdding
user
CancelApply fixesApply fixes
APPLIED CORRECTIONS
LinearAPPLIED
+ ADMIN+ OAUTH APP− APP
Corrected by A. Reyes · tracked in the record

Wrong data? Fix it in place

Reviewers correct entitlements or flag phantom users mid-review, without stopping to file a ticket. Every correction is recorded with a name and a timestamp.

1.4CYCLES

Campaigns that land on time

Overdue reviews get chased automatically. Reminders, escalations, and extension approvals run on rules you set once, and one page shows the whole campaign.

10d7d3dLEFT
QUERIES · 4QUERIES · 2QUERIES · 0AWAITING APPROVAL · 7AWAITING APPROVAL · 4AWAITING APPROVAL · 1EXTENSIONS · 2EXTENSIONS · 1EXTENSIONS · 0ESCALATIONS · 3ESCALATIONS · 1ESCALATIONS · 0
DAY 10Remind reviewer
DAY 7Reassign to line manager
DAY 3Notify admin
Send remindersInvestigate with Luna

One page shows what's stalling

Queries, approvals, extension requests, and escalations each carry a live count. When a cycle drifts, ask Luna to investigate.

3 DAYS OVERDUERemind
7 DAYSReassign to line manager
10 DAYSNotify admin

Set your overdue policy

The ladder runs remind, then reassign, then notify, and you set it once per campaign.

PLOY · NOWDavid has requested a 10 day extension for Figma
ApproveDecline
PLOY · NOWAna Reyes has requested a 5 day extension for GitHub
ApproveDecline
PLOY · NOWRavi Shah has requested a 7 day extension for Snowflake
ApproveDecline

More time, without the email thread

Reviewers request extra days in the product. Short requests are approved instantly and the rest reach you with context.

1.5END TO END

One review, start to finish

Create the campaign, let Luna prepare the rows, and Ploy runs the revocations, collects the sign-off and files the certificate. 5 steps from launch to evidence an auditor can hold.

MFA Verification ReviewTEMPLATE
Dormant Account ReviewTEMPLATE
SOC 2 Compliance ReviewTEMPLATE
QUARTERLYALL PRIVILEGED ACCESS
Avantia Law
“Ploy has transformed how we do access requests & we wouldn't be able to go back to the way it was.”
Peter F.Head of IT & Infosec, Avantia Law
Read the story
Liberis
“Ploy has enabled us to completely automate employee onboarding and offboarding, saving us 150 manual actions, clicks, and hours of time per employee.”
Paul HartHead of IT, Liberis
Welcome to the Jungle
“With Ploy, we've turned a tedious weekly task into easy automated flows. We're saving half a day a week and have completely streamlined onboarding across all our SaaS tools. Total game changer.”
Devon BrownSenior IT Engineer, Welcome to the Jungle
Luno
“Ploy saved me from drowning in spreadsheets, manual licence assignment and SaaS sprawl. It lets us easily make sense of what's being bought, used, and wasted which is more than I can say for most software tools. The best part? They listen, iterate fast, and don't take themselves too seriously. Perfect match.”
Simon FishleyGlobal IT Director, Luno
Read the story

Let Luna run your next review.